tag:blogger.com,1999:blog-3434846711820144864Thu, 12 Feb 2015 22:03:17 +0000Encyclopedia Dramatica: There Is No Joseph Evershttp://josephevers.blogspot.com/noreply@blogger.com (Anon)Blogger36125tag:blogger.com,1999:blog-3434846711820144864.post-6389604115443590592Wed, 11 Feb 2015 18:09:00 +00002015-02-11T20:54:28.331+00:00How Do I Contact The Owners Of Encyclopedia Dramatica?<span style="font-size: x-small;">posted on February 11 2015</span><br /><br />The current owner of encyclopediadramatica.se is Brian Richard Zaiger. The sysadmin is <span class="st">Sibin </span><span class="st"><span class="st">Grašić</span>.</span><br /><br /><br /><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="http://3.bp.blogspot.com/-JIVqYlR-UVM/VNuVO-MohsI/AAAAAAAAAIY/NHNQO9J52dk/s1600/sysops.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="http://3.bp.blogspot.com/-JIVqYlR-UVM/VNuVO-MohsI/AAAAAAAAAIY/NHNQO9J52dk/s1600/sysops.jpg" height="225" width="320" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;">Zaiger and Grasic</td><td class="tr-caption" style="text-align: center;"><br /></td><td class="tr-caption" style="text-align: center;"><br /></td></tr></tbody></table><span class="st">Mr Zaiger's contact information may be found by </span><a href="https://archive.today/EckFo" target="_blank">querying whois.nic.us with "edrama.us"</a>. Mr. <span class="st">Grašić, who is a resident of Serbia, <a href="https://encrypted.google.com/search?q=%22+Sibin+Grasic%22" target="_blank">has listed contact information on various social media platforms</a>.</span>http://josephevers.blogspot.com/2015/02/how-do-i-contact-owners-of-encyclopedia.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-7380704049236305584Sat, 14 Sep 2013 19:08:00 +00002013-09-14T20:15:05.991+01:00encyclopediadramatica.se is downThe domain has been suspended by the registrar.<br /><br />/home/brian# whois encyclopediadramatica.se<br /><br />state: active<br />domain: encyclopediadramatica.se<br />holder: bribri1816-00001<br />admin-c: -<br />tech-c: -<br />billing-c: -<br />created: 2012-03-21<br />modified: <b>2013-09-13</b> <br />expires: 2014-03-21<br />transferred: 2013-01-04<br />nserver: rita.ns.cloudflare.com<br />nserver: jeff.ns.cloudflare.com<br />dnssec: unsigned delegation<br />status: <b>clientHold</b> <br />registrar: 101Domain, Inc.<br /><br />If you query <a href="https://www.iis.se/english/domains/free/?">the whois web interface of The Internet Infrastructure Foundation in Sweden</a>, you will be provided with the contact details of the domain's owner, Brian Zaiger.<br /><br />Contact ID bribri1816-00001<br />Name Brian Zaiger<br />Organization Brian Zaiger<br />Organization number [US]S20268425<br />E-mail address brian.zaiger@gmail.com<br />Address row 1 6 Essex st, Apt 3<br />Address row 2 -<br />Address row 3 -<br />Zip code 01970<br />City Salem<br />Country US<br />Phone +1.8564921437<br />Fax -<br />Created 2013-01-04<br />Last updated -<br />Registrar 101Domain, Inc.http://josephevers.blogspot.com/2013/09/encyclopediadramaticase-is-down.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-3819710204217014182Fri, 17 May 2013 04:58:00 +00002013-05-17T18:16:47.800+01:00Ryan Cleary and Luzsec Members Sentenced<h2><a href="http://www.zdnet.com/lulzsec-group-sentenced-hacker-combats-child-porn-allegations-7000015489/" target="_blank">SOUTHWARK, LONDON — Four members of the LulzSec hacking group were on Thursday sentenced in court after pleading guilty to various computer hacking-related charges.</a></h2><div class="separator" style="clear: both; text-align: center;"><a href="http://3.bp.blogspot.com/-Abj2SLU3xzs/UZZlrFOPNHI/AAAAAAAAAHs/H1agYbJnbdU/s1600/Cleary.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/-Abj2SLU3xzs/UZZlrFOPNHI/AAAAAAAAAHs/H1agYbJnbdU/s1600/Cleary.jpg" /></a></div><br />Lulzsec wannabe and <a href="http://www.bing.com/search?q=Encyclopedia+Dramatica+Ryan+Cleary&amp;go=&amp;qs=bs&amp;form=QBLH" target="_blank">founder of the current Encyclopedia Dramatica, Ryan Cleary</a>, was sentenced to 32 months in prison by Presiding Judge Deborah Taylor and must serve at least half. Three others,&nbsp;Ryan Ackroyd, Jake Davis and Mustafa al-Bassam, were also sentenced.<br /><br />Cleary has also plead guilty to&nbsp;downloading and possessing&nbsp;indecent images of children, some as young as six months. The sentencing for that crime has been delayed.http://josephevers.blogspot.com/2013/05/ryan-cleary-and-luzsec-members-sentenced.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-3110810343847961043Tue, 19 Mar 2013 21:10:00 +00002013-03-19T21:10:00.361+00:00Andrew Auernheimer Given 41 Month Jail Term<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="http://assets.nydailynews.com/polopoly_fs/1.1292079.1363637202!/img/httpImage/image.jpg_gen/derivatives/landscape_635/ipad19n-1-web.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="200" src="http://assets.nydailynews.com/polopoly_fs/1.1292079.1363637202!/img/httpImage/image.jpg_gen/derivatives/landscape_635/ipad19n-1-web.jpg" width="154" /></a></td></tr><tr align="right"><td class="tr-caption" style="text-align: center;"><span style="font-size: x-small;">Julio Cortez/AP</span><br /><span style="font-size: x-small;">(apparently they don't make clothes to fit trolls)</span></td></tr></tbody></table><br /><a href="http://www.nydailynews.com/news/national/t-hacker-sentenced-3-years-jail-stealing-100-000-ipad-users-email-addresses-article-1.1292080" target="_blank">AT&amp;T hacker ‘Weev’ sentenced to over 3 years in jail for stealing more than 100,000 email addresses of iPad users</a><br /><br />Andrew Auernheimer, formerly of Fayetteville, Ark., was tried in New Jersey. and calls himself an online ‘troll.’ He hacked into AT&amp;T’s servers and stole the email addresses of Apple tablet users, in New York City Mayor Michael Bloomberg, then-White House chief of staff Rahm Emanuel, film mogul Harvey Weinstein and other celebrities. Auernheimer was defiant in court and called his sentencing shameful.http://josephevers.blogspot.com/2013/03/former-encyclopedia-dramatica-sysop-faces41monthsinjail.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-7053226754573637246Tue, 19 Mar 2013 20:42:00 +00002013-03-19T20:42:26.889+00:00CloudFlare attracts "repeat infringers"<a href="http://www.cloudflare-watch.org/repeats.html" target="_blank">From our friends at cloudflare-watch</a>, a large list of Cloudflare customers about whom Google has received more than 100 copyright removal requests for each.http://josephevers.blogspot.com/2013/03/cloudflare-attracts-repeat-infringers.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-3029209368357908108Tue, 19 Mar 2013 20:31:00 +00002013-09-14T20:13:02.908+01:00Affordable and Effective Laser Tatoo Removal<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="http://www.infinitymedspa.com/images/tattooremoval3.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" src="http://www.infinitymedspa.com/images/tattooremoval3.jpg" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;"><em><a href="http://www.infinitymedspa.com/tattoo_removal.html" target="_blank">Thanks Infinity Medspa of Santa Clarita!</a></em></td></tr></tbody></table><br />http://josephevers.blogspot.com/2013/03/affordable-and-effctive-laser-tatoo.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-1390247596838995156Fri, 20 Jul 2012 19:43:00 +00002012-07-20T20:43:47.981+01:00Spamhaus is blocking CloudFlare's IP rangesThe majority of Cloudflare's 44,500 IP addresses are now in <a href="http://www.spamhaus.org/sbl/listings/cloudflare.com">Spamhaus' block list</a> because <a href="http://blog.wordtothewise.com/2012/07/cloudflare-and-spamhaus/">they are allowing abusers to hide behind their reverse proxy</a>. This means if you have a domain that uses Cloudflare's services, email sent from that domain will be blocked by any upstream provider that subscribes to the block list.<br /><br />For more on this, see <a href="http://cloudflare-watch.org/">cloudflare-watch.org</a>.http://josephevers.blogspot.com/2012/07/spamhaus-is-blocking-cloudflares-ip.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-1608209683285871094Thu, 14 Jun 2012 19:19:00 +00002012-06-19T18:38:28.017+01:00The Romanian Connection<b>Encyclopedia Dramatica, along with remnants of LulzSec<br />and AnonOps, have moved to servers in Romania.&nbsp;</b><u><b><br /></b></u><br /><b><br /></b><br /><a href="http://voxility.com/">Voxility</a> provides wholesale bandwidth and rents servers to hosting providers and has datacenters in Frankfurt, Bucharest, Washington and Los Angeles.<b> </b>Many of ED's related domains are hosted by Voxility in Bucharest.<b><br /></b><br /><h3><a href="http://centralops.net/co/DomainDossier.aspx?addr=donate.encyclopediadramatica.se&amp;dom_whois=true&amp;dom_dns=true&amp;traceroute=true&amp;net_whois=true&amp;svc_scan=true">Address lookup</a> for donate.encyclopediadramatica.se</h3><table border="0" cellpadding="5" cellspacing="0"><tbody><tr> <td align="left" valign="baseline">canonical name<strike> </strike><br /><strike><br /></strike><br /><strike>direct-connect.encyclopediadramatica.se.</strike>&nbsp; Whoops,this no longer true. It changed after this post was first published.<br /><strike><br /></strike><br />addresses 37.221.160.140</td><td valign="baseline"></td></tr></tbody></table><h3>Network Whois record</h3><span style="font-size: x-small;">Queried whois.ripe.net with "-B 37.221.160.140"...</span><br /><span style="font-size: x-small;">% Information related to '37.221.160.128 - 37.221.160.191'</span><br /><span style="font-size: x-small;"><br /></span><br /><span style="font-size: x-small;">inetnum: 37.221.160.128 - 37.221.160.191</span><br /><span style="font-size: x-small;">netname: SrsVPS1</span><br /><span style="font-size: x-small;">descr: </span><b><span style="font-size: x-small;">SrsVPS</span></b><br /><span style="font-size: x-small;">country: RO</span><br /><span style="font-size: x-small;">admin-c: TE1649-RIPE</span><br /><span style="font-size: x-small;">tech-c: TE1649-RIPE</span><br /><span style="font-size: x-small;">status: ASSIGNED PA</span><br /><span style="font-size: x-small;">mnt-by: VOXILITY-MNT</span><br /><span style="font-size: x-small;">mnt-lower: VOXILITY-MNT</span><br /><span style="font-size: x-small;">mnt-routes: VOXILITY-MNT</span><br /><span style="font-size: x-small;">changed: noc@voxility.com 20120412</span><br /><span style="font-size: x-small;">remarks: INFRA-AW</span><br /><span style="font-size: x-small;">source: RIPE</span><br /><span style="font-size: x-small;"><br /></span><br /><span style="font-size: x-small;">person: Thomas Edge</span><br /><span style="font-size: x-small;">address: 8971 Complex Drive</span><br /><span style="font-size: x-small;">address: San Diego, CA 92123</span><br /><span style="font-size: x-small;">phone: +978-587-1190</span><br /><span style="font-size: x-small;">e-mail: thomas@srsvps.com</span><br /><span style="font-size: x-small;">nic-hdl: TE1649-RIPE</span><br /><span style="font-size: x-small;">mnt-by: VOXILITY-MNT</span><br /><span style="font-size: x-small;">changed: noc@voxility.com 20120228</span><br /><span style="font-size: x-small;">abuse-mailbox: abuse@srsvps.com</span><br /><span style="font-size: x-small;">source: RIPE</span><br /><br />The name and address in California aren't real. The phone number is Brian Zaiger's, though. Srsvps sells vps's and is advertised on ED.<br /><br />37.221.160.140 and&nbsp;37.221.160.138 deliver encyclopediadramatica.se wiki and forum pages.<br />37.221.160.139 is "the future home of Viral Security".<br />37.221.160.135 is a proxy, ro.myprivatevpn.be .<br /><br /><br />Another Romanian netblock controlled by ED's principals is:<br /><br /><span style="font-size: x-small;">Queried whois.ripe.net with "-B 109.163.233.1"...<br /><br />% Information related to '109.163.233.0 - 109.163.233.63'<br /><br />inetnum: 109.163.233.0 - 109.163.233.63<br />netname: SrsVPS1<br />descr: SrsVPS<br />country: RO<br />admin-c: TE1649-RIPE<br />tech-c: TE1649-RIPE<br />status: ASSIGNED PA<br />mnt-by: VOXILITY-MNT<br />mnt-routes: VOXILITY-MNT<br />mnt-lower: VOXILITY-MNT<br />changed: noc@voxility.com 20120217<br />remarks: INFRA-AW<br />source: RIPE</span><br /><br />Some web sites on this netblock:<br />109.163.233.11 AnonNews, owned by Sven Slootweg<br />109.163.233.7 Anonleaks<br />109.163.233.26 Anonleaks<br />109.163.233.31 RogueSec<br />109.163.233.32 RogueSec<br />109.163.233.35 sexytiem.se<br />109.163.233.38 302 redirect to http://233.38/ (bogus IP address)<br />109.163.233.45 seductiondatabase.com<br />109.163.233.9 302 redirect to http://233.9/ (bogus IP address)<br /><br /><br />Non-Romanian netblocks here:<br /><br /><span style="font-size: x-small;">Queried whois.ripe.net with "-B 37.59.72.64"...</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">% Information related to '37.59.72.64 - 37.59.72.79'</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">inetnum: 37.59.72.64 - 37.59.72.79</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">netname: EDRAMA2</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">descr: EDrama Ltd</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">country: CH</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">org: ORG-OC30-RIPE</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">admin-c: OTC2-RIPE</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">tech-c: OTC2-RIPE</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">status: ASSIGNED PA</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">mnt-by: OVH-MNT</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">changed: noc@ovh.net 20120202</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">source: RIPE</span><span style="font-size: x-small;"><br /></span><br /><span style="font-size: x-small;"><br /></span><br /><br />37.59.72.67 www.anonnews.org tahoe-gateway.cryto.net direct-connect.anonnews.org<br />37.59.72.70 xvp.edrama.us <br />37.59.72.74 mail.edrama.us mail.encyclopediadramatica.se<br /><br /><span style="font-size: x-small;"><br /></span><br /><span style="font-size: x-small;">Queried whois.ripe.net with "-B 37.59.72.96"...</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">% Information related to '37.59.72.96 - 37.59.72.111'</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">inetnum: 37.59.72.96 - 37.59.72.111</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">netname: EDRAMANET1</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">descr: EDrama Ltd</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">country: CH</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">org: ORG-OC30-RIPE</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">admin-c: OTC2-RIPE</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">tech-c: OTC2-RIPE</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">status: ASSIGNED PA</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">mnt-by: OVH-MNT</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">changed: noc@ovh.net 20120202</span><span style="font-size: x-small;"><br /></span><span style="font-size: x-small;">source: RIPE</span><span style="font-size: x-small;"><br /></span><br /><br />37.59.72.101 srsvps.com ns1.srsvps.com<br />37.59.72.103 ns2.srsvps.com<br /><br /><span style="font-size: large;"><b>Here is an incomplete history of of the reborn ED's hosting providers.&nbsp;</b></span><br /><br />April 15 2011<br /><a href="http://www.robtex.com/ip/69.65.55.21.html">69.65.55.21</a><br /><br />June 27 2011<br /><a href="http://bgp.he.net/ip/216.14.104.1">web.encyclopediadramatica.ch: 216.14.104.1</a><br />sql.encyclopediadramatica.ch: 216.14.104.2<br /><br />June 30 2011<br />direct.encyclopediadramatica.ch: 69.65.55.21<br /><br />July 12 2011<br /><a href="http://bgp.he.net/ip/184.164.147.135#_whois">184.164.147.135</a><br /><br />July 22 2011<br /><a href="http://bgp.he.net/ip/85.10.206.54#_whois">85.10.206.54</a><br /><br />August 31 2011<br /><a href="http://bgp.he.net/ip/94.23.168.77#_whois">94.23.168.77</a><br /><br />September 14 &nbsp;2011<br />static.encyclopediadramatica.ch, images.encyclopediadramatica.ch:&nbsp;85.10.206.54<br /><br />September 19 &nbsp;2011<br />direct-connect.encyclopediadramatica.ch: <a href="http://bgp.he.net/ip/173.204.20.100#_ipinfo">173.204.20.100</a><br /><br /><br />September 22&nbsp; 2011<br />direct-connect.encyclopediadramatica.ch, lb1.edrama.us: 31.22.165.46<br /><br />September 23 2011<br /><a href="http://bgp.he.net/ip/46.246.111.72#_whois">46.246.111.72</a><br /><br />October 2 2011<br /><a href="http://bgp.he.net/ip/213.155.18.13#_whois">213.155.18.13</a>strikehttp://josephevers.blogspot.com/2012/06/current-hosting-provider-of.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-9014628714742645753Thu, 14 Jun 2012 04:18:00 +00002012-06-14T05:18:27.468+01:00Ryan Cleary indicted by U.S.<a href="http://www.bloomberg.com/news/2012-06-14/-lulzsec-associated-indicted-in-u-s-for-hack-attacks.html">Cleary Indicted in U.S. for Hack Attacks</a><br /><br />Ryan Cleary, a 20-year-old U.K. man and associate of the “LulzSec” hacking group, was indicted on charges of computer attacks on Sony Pictures Entertainment Inc., Fox Entertainment Group Inc. and other entities.<br /><br />Cleary, incarcerated as he faces foreign prosecution in England, was indicted by a federal grand jury in Los Angeles on one count of conspiracy and two counts of impairing computers, Andre Birotte, U.S. Attorney in Los Angeles, said in an e-mail today. <br /><br /><br />The indictment is here, <a href="http://s3.documentcloud.org/documents/368707/hacking-indictment.pdf">U.S. v. Cleary, 12-561</a>.<br /><br />From the indictment, this is interesting:<br /><br /><blockquote class="tr_bq">Overt Act No. 8: On or about June 9, 2011, defendant CLEARY provided<br />his co-conspirators, including members of LulzSec, access to computer<br />resources located at <strong><em>GigeNET</em></strong>, a data and server hosting company in Illinois, to facilitate communication between defendant CLEARY's<br />co-conspirators and to store and publish stolen data.</blockquote><br />Who do we know that is a friend of Ryan's, and owns netblocks at GigeNET?http://josephevers.blogspot.com/2012/06/ryan-cleary-indicted-by-us.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-6507726674819149725Sat, 12 May 2012 21:02:00 +00002012-05-13T00:10:51.347+01:00Four Accused LulzSec Hackers Appear In Court<a href="http://www.businessweek.com/news/2012-05-11/u-dot-k-dot-charges-lulzsec-member-over-pentagon-computer-attack">Ryan Cleary, Ryan Ackroyd, Jake Davis and a 17-year-old male appeared in a British court May 11</a>, and were told they have to return June 25 to enter pleas for indictments on various computer-related crimes.<br /><br /><a href="http://www.forbes.com/sites/parmyolson/2012/05/11/four-accused-lulzsec-hackers-appear-in-court-together-for-the-first-time/">Four of the eight counts listed in an updated British indictment Friday were levelled solely on Cleary</a>, the founder of the current version of Encyclopedia Dramatica. He is accused of supplying a botnet — or a network of thousands of infected computers that can be used to paralyze websites — to others, and operating one himself to attack the website of DreamHost, a web hosting company. He is also accused of “installing and/or altering computer programs” on computers at the Pentagon controlled by the U.S. Air Force, between May 1 and June 22, 2011.<br /><br />On May 2 2012, <a href="http://www.reuters.com/article/2012/05/02/usa-cyber-arrests-idUSL1E8G2MOI20120502">a US Federal indictment was made public</a> outlining computer crime-related charges against alleged Lulzsec members Jeremy Hammond of the US, Donncha O'Cearrbhail and Darren Martyn of Ireland, and Jake Davis and Ryan Ackroyd of Britain. Of particular interest is <a href="http://ameristroika.wordpress.com/2012/05/10/lulzsec-indictment-anonymous-co-conspirator-not-named-as-defendant/">the mention of an anonymous, unindicted co-conspirator</a> on page 23. The indictment itself can be found at <a href="http://cryptome.org/2012/05/net-feds-lulzsec-antisec.pdf">Cryptome</a>.<br /><br />In related news, <a href="https://mobile.twitter.com/_MLT_">MLT</a>, an unnamed 17 year-old member of TeaMp0isoN from Newcastle <a href="http://news.techworld.com/security/3356961/police-arrest-alleged-teampoison-hacker-in-newcastle/">was arrested by local police</a> on May 9 on suspicion of offenses under the Computer Misuse Act.<br /><br />The arrested teen was described by Scotland Yard as being the “spokesperson” of TeamPoison.<br /><br />"He has been taken to a local police station for interview. Computer equipment has been seized and is undergoing a detailed forensic examination," the statement read.<br /><br />If <a href="http://pastebin.com/F4nuFS6k">this paste</a> is to be believed, MLT is a customer of srsvps, a business run by the principals behind encyclopediadramatica.se. <a href="https://encrypted.google.com/search?q=srsvps+bulletproof">The supposedly bullet proof, offshore srsvps</a> is not much protection if one's computers, or the home computers of one's co-conspirators, are seized.<br /><br />http://josephevers.blogspot.com/2012/05/four-accused-lulzsec-hackers-appear-in.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-2912676944155763005Tue, 01 May 2012 20:32:00 +00002012-05-01T22:57:26.798+01:00Gwapo, DDoS King and Satisfied Cloudflare Customer<br /><a href="http://www.scmagazine.com.au/News/298460,girls-hawk-ddos-service-on-youtube.aspx">From a news story by SC magazine</a>.<br /><br /><blockquote>A hacker is selling a reportedly booming distributed denial of service (DDoS) attack service and has taken to YouTube to pull new clients.<br /><br /> The service was first launched in January on Hack Forums and has so far recruited several large enterprises who have paid to have rival organisations attacked, the operator Gwapo told SC Magazine. <br /><br />… <br /><br />His own site, ddoes.com, was protected by CloudFlare, an anti-DDoS provider which formerly protected LulzSec's website from a barrage of cyber attacks.</blockquote><br />See also the previous blog post &nbsp;<a href="http://josephevers.blogspot.com/2011/08/cloudflare-enables-miscreants.html">Cloudflare Enables Miscreants</a>.http://josephevers.blogspot.com/2012/05/gwapo-ddos-king-and-satisfied.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-1588771461392748756Sun, 01 Apr 2012 20:13:00 +00002012-04-04T05:16:26.989+01:00The Reach of Encyclopedia Dramatica<i><b>Whether some people like it or not, ED is a very popular site. It serves between one and three million pages per day.</b></i> - <a href="http://www.webcitation.org/66cB9fg1Q">Zaiger, exaggerating his audience size.&nbsp;</a><br /><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="http://4.bp.blogspot.com/-0xJJ3NyVq8Q/T3vKgqw80BI/AAAAAAAAAHc/_8ZLg2kL46o/s1600/alexa_2.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="220" src="http://4.bp.blogspot.com/-0xJJ3NyVq8Q/T3vKgqw80BI/AAAAAAAAAHc/_8ZLg2kL46o/s400/alexa_2.png" width="400" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;">global reach of this blog with 28 posts, compared to<br />encyclopediadramtica.se, with 10,000 "articles"</td></tr></tbody></table><br /><div class="separator" style="clear: both; text-align: center;"></div>If Zaiger's statement was true,&nbsp;Encyclopedia Dramatica should be earning <i>500 to 1500 US dollars per day, </i>based on a very conservative estimate of an ad income of <a href="http://blogs.imediaconnection.com/blog/2011/11/18/projecting-online-ad-revenue/">$.50 per 1,000 page views</a><i>.</i>http://josephevers.blogspot.com/2012/04/reach-of-encyclopedia-dramatica.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-1226190665273510268Sat, 31 Mar 2012 20:40:00 +00002012-03-31T22:09:45.649+01:00Ryan Cleary Is Back In JailRyan Cleary, <a href="http://josephevers.blogspot.com/2011/07/lulz.html">former owner of the resurrected Encyclopedia Dramatica</a>, was jailed March 5 for violating his bail conditions.<br /><br /><span style="background-color: #cfe2f3;"><a href="http://www.foxnews.com/world/2012/03/31/uk-lulzsec-suspect-jailed-for-contacting-us-hacker/">UK LulzSec suspect jailed for contacting US hacker</a><br />Published March 31, 2012<br />Associated Press<br /><br />LONDON -- The lawyer for a 19-year-old Briton suspected of links to the hacking group Lulz Security says her client's back behind bars for breaching his bail conditions.<br /><br />Karen Todner says that teenager Ryan Cleary had sent a handful of electronic messages to LulzSec leader Hector Xavier Monsegur over the Christmas period, despite being banned from the Internet as part of his bail agreement.<br /><br />London's Metropolitan Police say Cleary was rearrested on March 5, a day before the FBI disclosed that Monsegur, better known as Sabu, had been secretly working as an informant.<br /><br />Todner said Saturday that Cleary is now being held in Chelmsford Prison, about 35 miles northeast of London.</span><br /><span style="background-color: #cfe2f3;"><br /></span><br /><span style="background-color: #cfe2f3;">He is due to reappear before a judge in May.</span><br /><span style="background-color: #cfe2f3;"><br /></span><br /><a href="http://www.webcitation.org/62N1WeaTW">Here is Garrett Moore tweeting with Sabu (Hector Xavier Monsegur) last September</a>, long after Sabu's arrest and his cooperation with the Feds started.<br /><br /><br /><br />http://josephevers.blogspot.com/2012/03/ryan-cleary-is-back-in-jail.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-2568002480367879854Tue, 20 Mar 2012 14:40:00 +00002012-03-23T01:07:47.530+00:00ED is down March 2012<span style="font-size: large;"><b>Update: </b>After SWITCH was contacted and asked for the reason why the nameservers for encyclopediadramatica.ch were deleted, a source responded, "<i>encyclopediadramatica.ch had to be inactivated and blocked due to a court order from <a href="http://www.sg.ch/home/staat___recht/staat/staatsanwaltschaft.html">the criminal prosecutor of the Canton of St. Gallen</a>.</i>"&nbsp;</span><br /><br /><span style="font-size: large;"><b>Update #2: </b></span><span style="font-size: large;">At roughly the same time ed.ch was inactivated, <a href="http://whois.domaintools.com/encyclopediadramatica.ch">the domain registration was changed to list Ryan's mum, Rita as the technical contact.</a></span><br /><span style="font-size: large;"><br /></span><br /><br /><span style="background-color: #cfe2f3;">Domain name:<br /><br />encyclopediadramatica.ch<br /><br /><br /><br />Holder of domain name:<br /><br />EDrama Limited<br /><br />Cleary Ryan<br /><br />South Beech Avenue 10<br /><br />GB-SS118AH Wickford<br /><br />United Kingdom<br /><br />Contractual Language: English<br /><br /><br /><br />Technical contact:<br /><br />EDrama Limited<br /><br />Cleary Rita<br /><br />South Beech Avenue 10<br /><br />GB-SS118AH Wickford<br /><br />United Kingdom</span><br /><br />Yesterday, <a href="https://www.nic.ch/reg/ds03/whois/view-result.html?lid=en&amp;mod=2860386677#WhoisForm">the nameservers for encyclopediadramatica.ch were deleted from the registrar for Swiss domain names, SWITCH</a>. <br /><br />Last October, <a href="https://encrypted.google.com/search?q=%22sven+slootweg%22+sabu">Sven Slootweg</a> changed the registrar records to indicate that the new owner was <a href="http://www.bbc.co.uk/news/uk-england-17399149">Ryan Cleary</a>. Speculation leads to the possibility that representatives of Cleary are responsible for deleting the nameservers from the records, since he agreed to avoid using the internet on condition of his release from jail while he awaits trial on multiple charges.http://josephevers.blogspot.com/2012/03/ed-is-down-march-2012.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-7609530706492505707Wed, 07 Mar 2012 00:46:00 +00002012-03-07T00:46:18.681+00:00Die Revolution sagt ich bin, ich war, ich werde sein.<blockquote class="tr_bq"><a href="http://mobile.twitter.com/anonymousabu">anonymouSabu</a> The federal government is run by a bunch of fucking cowards. Don't give in to these people. Fight back. Stay strong. <a href="http://mobile.twitter.com/anonymousabu/status/176818865156796416">1 day ago</a>&nbsp;</blockquote>The first mention that <a href="http://pastebin.com/76TsPHeU">Hector Monsegur = Sabu</a> seems to have happened around June 22 2011, roughly the same time both&nbsp;<a href="http://money.cnn.com/2012/03/06/technology/anonymous_arrests/index.htm">he</a> and <a href="http://news.sky.com/home/uk-news/article/16016612">Ryan Cleary</a> were arrested. &nbsp;Monsegur has been working with the FBI since.<br /><br />I wonder where Garrett's gone off to, and if Saad has ever had a friendly chat with the Feds.http://josephevers.blogspot.com/2012/03/die-revolution-sagt-ich-bin-ich-war-ich.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-5513453498567747603Fri, 24 Feb 2012 04:07:00 +00002012-02-24T04:07:28.870+00:00Netblocks owned by "EDrama Ltd"Queried whois.ripe.net with "-B 37.59.72.64"...<br /><br />% Information related to '37.59.72.64 - 37.59.72.79'<br /><br />inetnum: 37.59.72.64 - 37.59.72.79<br />netname: EDRAMA2<br />descr: EDrama Ltd<br />country: CH<br />org: ORG-OC30-RIPE<br />admin-c: OTC2-RIPE<br />tech-c: OTC2-RIPE<br />status: ASSIGNED PA<br />mnt-by: OVH-MNT<br />changed: noc@ovh.net 20120202<br />source: RIPE<br /><br />anonnews.org &nbsp;37.59.72.67<br />tahoe-gateway.cryto.net &nbsp;37.59.72.67<br />lists.encyclopediadramatica.ch &nbsp;37.59.72.68<br />mail.edrama.us a 37.59.72.74<br />mail.encyclopediadramatica.ch 37.59.72.74<br /><br /><a href="http://www.robtex.com/dns/cryto.net.html#whois">cryto.net</a> and&nbsp;<a href="https://www.google.nl/search?q=%22anonnews.org%22+%22sven+slootweg%22">anonnews.org</a> are of course owned by Joepie91 AKA Sven Slootweg. He has <a href="http://whois.domaintools.com/anonnews.org">changed the registration</a> of anonnews to claim that the domain is owned by Pirate Bay co-founder <a href="http://en.wikipedia.org/wiki/Gottfrid_Svartholm">Gottfrid Swartholm</a>. Slootweg also changed the domain registration of <a href="http://pastebin.com/Cp0d89jQ">encyclopediadramatica.ch</a> to <a href="http://whois.domaintools.com/encyclopediadramatica.ch">claim it is owned by Ryan Cleary</a>, who is currently <a href="http://www.bing.com/search?q=%22ryan+cleary%22+%22awaiting+trial%22">awaiting trial In England</a>.<br /><br /><br />Queried whois.ripe.net with "-B 37.59.72.96"...<br /><br />% Information related to '37.59.72.96 - 37.59.72.111'<br /><br />inetnum: 37.59.72.96 - 37.59.72.111<br />netname: EDRAMANET1<br />descr: EDrama Ltd<br />country: CH<br />org: ORG-OC30-RIPE<br />admin-c: OTC2-RIPE<br />tech-c: OTC2-RIPE<br />status: ASSIGNED PA<br />mnt-by: OVH-MNT<br />changed: noc@ovh.net 20120202<br />source: RIPE<br /><br />srsvps.com 37.59.72.101http://josephevers.blogspot.com/2012/02/netblocks-owned-by-edrama-ltd.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-5904042412039212466Sat, 28 Jan 2012 03:59:00 +00002012-02-04T21:05:56.470+00:00Jake Davis and Ryan Cleary Get a New Court Date<u><b>Update: Sat Feb 4</b></u><br /><br /> Ryan Cleary is a subject of discussion during <a href="http://www.youtube.com/watch?v=Ryq1v-cLHrk&amp;feature=related">a conference call between agents from the FBI and the Scotland Yard</a>. (The call was surreptitiously joined and recorded by persons unknown.)&nbsp; It appears the case may have been delayed in part because of an investigation of "<a href="http://www.foxnews.com/scitech/2012/02/03/raw-data-rough-transcript-fbi-call-allegedly-hacked-by-anonymous/">indecent images" found on Cleary's hard drive</a>.<br /> <br /><blockquote class="tr_bq" style="background-color: #cfe2f3;"> <i>7:15 -- How much time is reasonable? I've said 8 weeks. Got Ryan Cleary's indecent images - found by USAF who looked at hard drive. Propose they get dealt with first. That will take 6-8 weeks</i><br /><br /><i>13:50 &nbsp;-- Got the final forensic report from USAF re: Ryan Cleary hard drive. 325 pages. Quite a piece of work. We're impressed with it.</i></blockquote>&nbsp;At 15:25 of the recording, there's mention of waiting on Cleary's ISP to connect an IP address to his house, and an "extradition squad". He may be making a trip to the US in the future.<br /><br /><a href="http://www.shetnews.co.uk/news/newsbites/3107-hacktivist-jake.html">Friday, 27 January 2012 | Written by Shetland News</a> <br /><br /><blockquote class="tr_bq" style="background-color: #cfe2f3;">SHETLAND teenager Jake Davis accused of hacking into websites under the pseudonym ‘Topiary’ has had his trial delayed until 11 May.<br /><br />Davis was due to enter a plea at Southwark Crown Court in London along with fellow accused hacker 19 year old Ryan Cleary, but the trial was pushed back due to a continuing investigation into the “possible complicity of others”, with the case being described a “significant and complex international investigation”.</blockquote><br /><a href="https://mobile.twitter.com/rj_gallagher">Freelance journalist Ryan Gallagher</a>, who attended the hearing said, "<span class="status">delay due to continuing investigation into possible complicity of others" and "</span><span class="status">Davis' defence will find out more details, including "letters from foreign jurisdictions", on 30 March, when new evidence entered."</span>http://josephevers.blogspot.com/2012/01/jake-davis-and-ryan-cleary-get-new.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-4277491358988803073Fri, 02 Dec 2011 03:14:00 +00002011-12-02T03:14:18.792+00:00A 28 year old SadMonkey from St. Louis Missouri[May 11 2011 19:48:59] *** Joins: Mojo(~home@97-85-145-160.dhcp.stls.mo.charter.com)<br />[May 11 2011 22:55:44] &lt;Mojo&gt; no. I'm SadMonkey<br />[May 25 2011 00:38:36] &lt;Mojo&gt; I'm from St. Louis and Used to live in Ferguson. <br />[Aug 17 2011 22:02:08] &lt;Mojo&gt; http://josephevers.blogspot.com/p/encyclopediadramaticach-irc-users.html KILL THAT MOTHERFUCKER!<br />[Nov 30 2011 14:34:12] &lt;Mojo&gt; Hey guys. This may be old news, but we took care of the guy who ran the josephevers blog, right?http://josephevers.blogspot.com/2011/12/28-year-old-sadmonkey-from-st-louis.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-4440247267054923976Sun, 04 Sep 2011 23:31:00 +00002011-09-15T00:34:20.624+01:00ED's Google shopping cartOn Sep 5 2011:<br /><br /><blockquote><span style="background-color: cyan;">garrett changes topic to "EncyclopediaDramatica sucks. | Several hundred dollars worth of hardware is toasted, we need suggestions/donations for some new servers. PM garrett if you know of a host who can handle us."</span></blockquote><br />Maybe something you did caused your last three hosts to drop you.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="http://1.bp.blogspot.com/-UoLxjwrt7IE/TmbbgHi4API/AAAAAAAAAGQ/9B9JfmPRbFE/s1600/scrshot2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="300" src="http://1.bp.blogspot.com/-UoLxjwrt7IE/TmbbgHi4API/AAAAAAAAAGQ/9B9JfmPRbFE/s320/scrshot2.jpg" width="320" /></a></div><br /><div class="separator" style="clear: both; text-align: center;"><a href="http://1.bp.blogspot.com/-RRfwNmE902Q/TmbbpgWQnTI/AAAAAAAAAGU/RW6iDBzE6z0/s1600/check2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="186" src="http://1.bp.blogspot.com/-RRfwNmE902Q/TmbbpgWQnTI/AAAAAAAAAGU/RW6iDBzE6z0/s400/check2.jpg" width="400" /></a></div><br /><a href="https://checkout.google.com/view/buy?o=shoppingcart&amp;shoppingcart=675850777706720">This is the same shopping cart that Ryan Cleary used</a> when he was running ED, and <a href="http://www.dailymail.co.uk/news/article-2031990/Boy-17-charged-cyber-attacks-hacking-group-Anonymous.html">that is his home address</a>. One condition of his release from jail while he awaits trial is he is forbidden from using the internet.<br /><br /><blockquote><span style="background-color: cyan;">The judge issued a stark warning to both defendants to comply with their bail conditions as he fixed their plea and case management hearing for January 27, 2012.&nbsp;</span></blockquote><br />Perhaps his attorney, Ms. Karen Todner should be informed.<br /><br />http://josephevers.blogspot.com/2011/09/eds-google-shopping-cart.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-8196080920846914616Sun, 14 Aug 2011 18:55:00 +00002011-08-15T04:30:57.727+01:00Cloudflare Enables Miscreants<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container"><tbody>
<tr></tr>
<tr><td style="text-align: center;"><a href="http://1.bp.blogspot.com/-MIx1iWV5qQs/TkdBXR0GwAI/AAAAAAAAAGI/j0yOCk1LuYQ/s1600/prince.jpg" style="margin-left: auto; margin-right: auto;"><img border="0" src="http://1.bp.blogspot.com/-MIx1iWV5qQs/TkdBXR0GwAI/AAAAAAAAAGI/j0yOCk1LuYQ/s1600/prince.jpg" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;">Matthew Prince, founder and CEO of Cloundflare</td></tr>
</tbody></table><br />CloudFlare provides security, a CDN-like service, high-level compression and web content optimization, according to <a href="http://www.thewhir.com/web-hosting-news/061711_CloudFlare_Gets_an_Unusual_Endorsement_from_Hacker_Group_LulzSec">Web Host Industry Review</a>.<br /><br /><a href="https://www.cloudflare.com/overview.html">Cloudflare says</a><br /><br /><blockquote style="background-color: #cfe2f3;">On average, a website on CloudFlare ... <br />... loads twice as fast <br />... uses 60% less bandwidth <br />... has 65% fewer requests <br />... is way more secure <br />All for free!</blockquote><br />Because Cloudflare reduces bandwidth usage, obscures who is the actual hosting company of a website and offers its basic services for free, it has become popular among low-budget websites with controversial content.<br /><br />An endorsement by Cloudflare's most infamous client to date, Lulzsec, helped&nbsp; <a href="http://news.netcraft.com/archives/2011/06/22/lulzsec-fuels-growth-at-cloudflare.html">fuel a rapid growth</a> that in turn helped them to secure an additional <a href="http://s1.securityweek.com/cloudflare-raises-20-million-after-helping-lulzsecuritycom-run-fast-and-safe">US$20 million in funding</a>. Lulzsec's webmaster and spokesman, <a href="http://www.washingtonpost.com/world/europe/teenager-accused-of-being-lulzsec-hacking-spokesman-topiary-released-on-bail-in-britain/2011/08/01/gIQAHo47mI_story.html">Jake Davis, was arrested</a> July 28 2011 and charged with crimes relating to <a href="http://www.infosecwreck.com/timeline-of-lulzsec-hacks-releases">Lulzsec's activities</a>. Their website was used to host documents that were obtained by stealing databases and other files from servers they had compromised by <a href="http://www.google.ca/search?q=lulzsec+%220day+exploit%22%7C%22sql+injection%22">SQL injection or zero day exploits</a>. <br /><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"></td></tr>
<tr><td class="tr-caption" style="text-align: center;"></td></tr>
</tbody></table>Cloudflare has a comprehensive <a href="http://www.cloudflare.com/terms.html">terms of use policy</a> that would seem to preclude their providing services to Lulzsec and <a href="http://www.google.ca/search?q=%22encyclopedia+dramatica%22+cloudflare">similar sites</a>. It states in part:<br /><blockquote><br /><div style="background-color: #cfe2f3;"></div><h3 style="background-color: #cfe2f3;">SECTION 11: PROHIBITED USES</h3><div style="background-color: #cfe2f3;">You shall not post, transmit, retransmit, cache, or store material on or through CloudFlare's Service which, in the sole judgment of CloudFlare (a) is in violation of any local, state, federal, or foreign law or regulation, (b) is threatening, obscene, indecent, defamatory, or that otherwise could adversely affect any individual, group, or entity (collectively, "Persons"), or (c) violates the rights of any Person, including rights protected by copyright, trade secret, patent, or other intellectual property or similar laws or regulations including, but not limited to, the installation or distribution of "pirated" or other software products that are not appropriately licensed for Your use. You agree that you will NOT knowingly use the Service, among other things, to:</div><ol style="background-color: #cfe2f3;"><li>upload, post, transmit, or otherwise make available any content that is unlawful, harmful, threatening, abusive, harassing, tortious, defamatory, vulgar, obscene, libelous, invasive of another's privacy, hateful, or racially, ethnically, or otherwise objectionable;</li>
<li>harm minors in any way;</li>
<li>impersonate any person or entity, including but not limited to a CloudFlare official, forum leader, guide, or host, or falsely state or otherwise misrepresent your affiliation with a person or entity;</li>
<li>forge headers or otherwise manipulate identifiers in order to disguise the origin of any content transmitted through the Service;</li>
<li>upload, post, transmit, or otherwise make available any content that You do not have a right to make available under any law or under contractual or fiduciary relationships (such as inside information, proprietary, and confidential information learned or disclosed as part of employment relationships or under nondisclosure agreements);</li>
<li>upload, post, transmit, or otherwise make available any content that infringes any patent, trademark, trade secret, copyright, or other proprietary rights of any party;</li>
<li>upload, post, transmit, or otherwise make available any unsolicited or unauthorized advertising, promotional materials, "junk mail," "spam," "chain letters," "pyramid schemes," or the like;</li>
<li>upload, post, transmit, or otherwise make available any material that contains software viruses or any other computer code, files, or programs designed to interrupt, destroy, or limit the functionality of any computer software or hardware or telecommunications equipment;</li>
<li>interfere with or disrupt the Service or servers or networks connected to the Service, or disobey any requirements, procedures, policies, or regulations of networks connected to the Service;</li>
<li>intentionally or unintentionally violate, attempt to violate, or avoid any applicable ICANN regulation or policy;</li>
<li>intentionally or unintentionally violate any applicable local, state, national or international law, including, but not limited to, regulations promulgated by the U.S. Securities and Exchange Commission, any rules of any national or other securities exchange, including, without limitation, the New York Stock Exchange, the American Stock Exchange, or the NASDAQ, and any regulations having the force of law;</li>
<li>provide material support or resources (or to conceal or disguise the nature, location, source, or ownership of material support or resources) to any organization(s) designated by the United States government as a foreign terrorist organization pursuant to section 219 of the Immigration and Nationality Act;</li>
<li>"stalk" or otherwise harass another; or</li>
<li>promote or provide instructional information about illegal activities, promote physical harm or injury against any group or individual, or promote any act of cruelty to animals. This may include, but is not limited to, providing instructions on how to assemble bombs, grenades, and other weapons, and creating "Crush" sites. <br /><h3>SECTION 14: TERMINATION</h3>CloudFlare's policy is to investigate violations of these Terms of Service and terminate repeat infringers. You agree that CloudFlare may, under certain circumstances and without prior notice, immediately terminate your CloudFlare account, any associated email address, and access to CloudFlare.com and associated Services. Cause for such termination shall include, but not be limited to: (a) breaches or violations of the Terms of Service or other incorporated agreements or guidelines; (b) requests by law enforcement or other government agencies; (c) a request by you (self-initiated account deletions); (d) discontinuance or material modification to the Service (or any part thereof); (e) unexpected technical or security issues or problems; (f) extended periods of inactivity; (g) you have engaged or are reasonably suspected to be engaged in fraudulent or illegal activities; (h) having provided false information as part of your account; (i) having failed to keep your account complete, true, and accurate; (j) any use of the Service deemed at CloudFlare's sole discretion a Prohibited Use as defined above; and/or (k) nonpayment of any fees owed by you in connection with CloudFlare.com and associated Services. Further, you agree that all terminations for cause shall be made in CloudFlare's sole discretion and that CloudFlare shall not be liable to you or any third-party for any termination of your account, access to the Service, or any disruption to your services such a termination may cause. You expressly agree that in the case of a termination for cause you will not have any opportunity to cure. You further acknowledge and agree that notwithstanding any termination, your obligations to CloudFlare set forth in Sections 9, 10, 11, 12 and 13 shall survive such termination.</li>
</ol></blockquote><br />When asked about Lulzsec's use of their services, <a href="http://www.thewhir.com/web-hosting-news/061711_CloudFlare_Gets_an_Unusual_Endorsement_from_Hacker_Group_LulzSec">Cloudflare CEO Matthew Prince gave a standard response</a> that is now used corporate wide:<br /><br /><blockquote><span style="background-color: #cfe2f3;">"It's interesting to have public enemy number one using our service but it is important to note that we are not the hosting provider; we're much more similar to something like a network provider where traffic is passing through us and we're not actually storing any of the data," Prince says. "Importantly, if we were to kick them off of our network that wouldn't take the content off the Internet it would just be a little bit slower."</span></blockquote>I asked Cloudflare's abuse response team by email <i>if they have ever enforced their terms of service</i>. They responded with the non sequitur:<br /><br /><blockquote><span style="background-color: #cfe2f3;">We are not a web host and we don't censor content on the internet.</span><br /><span style="background-color: #cfe2f3;">Even if we remove a site from CloudFlare it doesn't remove the content</span><br /><span style="background-color: #cfe2f3;">from the internet in any way, shape, or form.When a complaint comes in we provide the direct IP to the site in question so that the person</span><br /><span style="background-color: #cfe2f3;">with the complaint can take their complaint directly to the web host</span><br /><span style="background-color: #cfe2f3;">of the site -- the only people who can ACTUALLY remove the site and</span><br /><span style="background-color: #cfe2f3;">its content from the internet. We comply with every complaint that we receive.</span></blockquote><br />I replied and reiterated my question, and it was ignored. <br /><br /><br />Later, <a href="http://www.thewhir.com/web-hosting-news/080811_Third_Party_Services_for_Web_Hosts_and_LulzSec_Details_with_Matthew_Prince_of_CloudFlare">The Whir reported from HostingCon that Prince said</a>,<br /><blockquote><br /><span style="background-color: #cfe2f3;">"… the LulzSec website had 18 million legitimate page views over 23 days. LulzSec had seven different hosts over 23 days, initially in Montreal. He says the other hosts were based in Malaysia, several US-based hosts, and ultimately had a German hosting provider."</span></blockquote>The obvious implication, which escapes Mr. Prince, is that the lulzsecurity.com site would have had a very hard time staying online if they weren't hiding behind CloudFlare. <br /><br />http://josephevers.blogspot.com/2011/08/cloudflare-enables-miscreants.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-8230321672757127580Thu, 28 Jul 2011 03:08:00 +00002011-10-12T05:18:01.009+01:00Lulz<h1><a href="http://www.ft.com/cms/s/0/f18562da-b874-11e0-b62b-00144feabdc0.html">Met hold online hacking group suspect</a></h1><h1></h1><blockquote style="background-color: #cfe2f3;">London’s Metropolitan Police have arrested a 19-year-old man on suspicion of being a founder and spokesman for a hacking group believed to be responsible for a series of cyberattacks on organisations such as the CIA and News Corporation. <br />The man used the online nickname Topiary, and “presented himself as a spokesman for the group” called Lulz Security, Scotland Yard said. Scottish authorities participated with the Met’s eCrime unit in making the arrest on Tuesday in the Shetland Islands.<br /><div class="story-package"></div><div class="story-package"></div>He was being taken to a police station in central London, said the Met.<br />The arrest is the most significant to date in the investigation of Lulz and a related but larger group called <a href="http://www.ft.com/cms/s/2/1f596aa4-048d-11e0-a99c-00144feabdc0.html#axzz1TKHKqodH" title="FT - Anonymous cyberwarriors stun experts">Anonymous</a>. In recent weeks, the Met <a href="http://www.ft.com/cms/s/2/3ffe8d3a-a0f4-11e0-adae-00144feabdc0.html#axzz1TKHKqodH" title="FT - Teenager on hacking charges is bailed">arrested <i><b>Ryan Cleary</b></i></a> and another teen said by police sources to have used the name <i><b>Tflow</b></i>.</blockquote><blockquote style="background-color: #cfe2f3;">Topiary controlled the Twitter account LulzSec, which was the main way the group communicated to the public during a prodigious 50-day hacking spree this year that alarmed law enforcement and national security officials. That account has more than 340,000 followers.<br />In internal Lulz chats that were later leaked, Topiary wrote that “Tflow/Sabu/myself/<i><b>kayla</b></i> started” the group.</blockquote><br />Ryan Cleary is the founder of Encyclopediadramatica.ch and <a href="http://www.foxnews.com/scitech/2011/07/22/notorious-lulzsec-hacker-tflow-released-on-bail/">Tflow</a> was one of his <a href="http://encyclopediadramatica.ch/index.php?title=Special:Log&amp;user=Tflow">first administrators</a>. The FBI is still on the hunt for <i><b>kayla</b></i>* and Sabu.<br />*<span style="font-size: x-small;">Kayla is now thought to be <a href="http://www.guardian.co.uk/technology/2011/sep/07/anonymous-lulzsec-males-court">two British men who were recently arrested</a> in September.&nbsp;</span><br /><br />Garrett E. Moore mentioned on ED's IRC channel:<br /><br /><div style="background-color: #cfe2f3;">Jul 26 2011 09:53:38 &lt;garrett&gt; ive known <b>kayla</b> waaaaay longer than <b>tflow</b></div><br />I wonder to what extent Garrett's connection is to Lulzsec?<br /><br />Here is Garrett, using the handle KnownCyberbully on Twitter, chatting with Sabu.<br /><br /><a href="http://www.webcitation.org/62N1WeaTW"><span style="background-color: #cfe2f3;">@anonymouSabu Hey dude, missed your PM. Hit me up whenever, glad you aren't dead. &lt;3</span></a><br /><br /><a href="http://www.webcitation.org/62N1eehtt">Here is Sabu</a>, more recently.<br /><br /><span style="background-color: #cfe2f3;">@Le_Researcher You fucking scrub - you got that from Ryan (who is violating his online prohibition) and that IP is a public Proxy. GOOGLE. <br />about 18 hours ago from web in reply to Le_Researcher</span><br /><br />He doesn't mean Ryan Cleary, does he?<br /><br /><h1 style="font-weight: normal;"><span style="font-size: small;"><br /></span></h1>http://josephevers.blogspot.com/2011/07/lulz.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-8657705714979289258Tue, 21 Jun 2011 14:53:00 +00002011-06-28T06:16:33.977+01:00Ryan Cleary Arrested<table cellpadding="0" cellspacing="0" class="tr-caption-container" style="float: left; margin-right: 1em; text-align: left;"><tbody><tr><td style="text-align: center;"><a href="http://2.bp.blogspot.com/-HNV7ADbnCGc/TglOeZb6VJI/AAAAAAAAAFw/8rMmOzAfS4o/s1600/ryan6.jpg" imageanchor="1" style="clear: left; margin-bottom: 1em; margin-left: auto; margin-right: auto;"><img border="0" src="http://2.bp.blogspot.com/-HNV7ADbnCGc/TglOeZb6VJI/AAAAAAAAAFw/8rMmOzAfS4o/s1600/ryan6.jpg" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;">Ryan Cleary,&nbsp; <a href="http://news.sky.com/skynews/Home/UK-News/Teenager-Ryan-Cleary-Accused-Of-Being-Hacking-Mastermind-Released-On-Bail-With-Strict-Conditions/Article/201106416019886">photo borrowed from Sky News</a></td></tr></tbody></table><div class="floatRHS"><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><img alt="Arrested: Ryan Cleary, pictured here aged 13, is suspected of launching cyber attacks from his Essex bungalow" class="blkBorder" height="200" src="http://i.dailymail.co.uk/i/pix/2011/06/22/article-2006118-0CAB82E600000578-67_308x335.jpg" style="margin-left: auto; margin-right: auto;" width="183" /></td></tr><tr><td class="tr-caption" style="text-align: center;">Ryan Cleary, pictured here at age 13, photo from <a href="http://www.dailymail.co.uk/sciencetech/article-2006118/Ryan-Cleary-LulzSec-cyber-terrorist-targeted-CIA-Essex.html">the Daily Mail</a><br /><br /><br /><div style="text-align: left;"><span style="font-size: small;"><b></b></span><span style="font-size: 1.2em;"></span></div></td></tr></tbody></table></div><div style="text-align: left;"><span style="font-size: small;"><b>update:</b></span> <span style="font-size: 1.2em;"><a href="http://www.dailymail.co.uk/sciencetech/article-2006118/Ryan-Cleary-LulzSec-cyber-terrorist-targeted-CIA-Essex-charged-SOCA-hacking.html">Ryan Cleary has been charged with five offences under the Computer Misuse Act</a>, police said. It was </span><span style="font-size: 1.2em;">also revealed the FBI seized servers in Virginia, run by Swiss web hosting company DigitalOne, around the time Cleary was arrested. <a href="http://josephevers.blogspot.com/2011/05/ryan-cleary-saad-naveed.html">Sven Slootweg</a>, AKA Joepie91 owner of <a href="http://anonnews.org/">Anonnews.org</a>, was named by the Daily Mail as a Lulzsec member. Slootweg is also active on encyclopediadramatica.ch and recently <a href="http://encyclopediadramatica.ch/index.php?title=Special:Log&amp;user=Joepie91">removed Cleary's systems administrator privileges</a> because of his jailing.</span><br /></div><a href="http://www.telegraph.co.uk/technology/news/8589078/Hackers-steal-entire-2011-census.html">It was first reportied Tuesday morning</a> Jun 21 2011 that encyclopediadramatica.ch owner Ryan Cleary was arrested.<br /><br /><blockquote><span style="background-color: #cfe2f3;">Ryan Cleary, an alleged member of the hacking group behind the claim, LulzSec, was arrested in Essex this morning by specialist cyber crime officers from Scotland Yard. </span><br /><br /><span style="background-color: #cfe2f3;">The 19-year-old was taken to a central London police station and remains in custody on suspicion of Computer Misuse Act and Fraud Act offences. </span><br /><br /><span style="background-color: #cfe2f3;"> A “significant amount of material” was also seized from an address in Wickford, Essex.</span><br /><div class="thirdPar"><br /><a href="http://content.met.police.uk/News/eCrime-unit-arrest-man/1260269113895/1257246745756">Scotland Yard has also confirmed</a> that a 19 year old resident of Wickford, Essex is in custody.</div></blockquote><div class="thirdPar"><blockquote><br /><span style="background-color: #cfe2f3;">Officers from the Metropolitan Police Central e-Crime Unit (PCeU) have arrested a 19-year-old man in a pre-planned intelligence-led operation.</span><br /><br /><span style="background-color: #cfe2f3;">The arrest follows an investigation into network intrusions and Distributed Denial of Service (DDoS) attacks against a number of international business and intelligence agencies by what is believed to be the same hacking group.</span><br /><br /><br /><span style="background-color: #cfe2f3;">The teenager was arrested on suspicion of Computer Misuse Act, and Fraud Act offences and was taken to a central London police station, where he currently remains in custody for questioning.</span><br /><br /><span style="background-color: #cfe2f3;">Searches at a residential address in Wickford, Essex, following the arrest last night have led to the examination of a significant amount of material. These forensic examinations remain ongoing.</span><br /><br /><span style="background-color: #cfe2f3;">The PCeU was assisted by officers from Essex Police and have been working in co-operation with the FBI.</span></blockquote><br /><a href="http://www.bbc.co.uk/news/technology-13859868">More from the BBC</a>.<br /><br /><div style="background-color: #cfe2f3;"></div><div style="background-color: #cfe2f3;"></div><blockquote><span style="background-color: #cfe2f3;">The teenager's mother spoke to BBC Radio Essex and confirmed her son had been arrested at 0330BST on Tuesday.</span><br /><br /><span style="background-color: #cfe2f3;">She said he had been obsessed with computers since he was 12 and added: "Computers were his world."</span></blockquote><b></b><br /><b></b><br /><br />More from <a href="http://www.dailymail.co.uk/sciencetech/article-2006118/Ryan-Cleary-LulzSec-cyber-terrorist-targeted-CIA-Essex.html">The Daily Mail</a>:<br /><br /><blockquote><span style="background-color: #cfe2f3;">Ryan, a loner whose family says 'lives his life online', faces the prospect of extradition to the U.S where he could face 60 years' behind bars for allegedly hacking into the CIA and Senate websites. </span><br /><br /><span style="background-color: #cfe2f3;">Ryan's mother Rita, 44, said her son suffers from agoraphobia and attention deficit disorder and had not left his bedroom for four years. </span><br /><br /><span style="background-color: #cfe2f3;">Speaking at the family's home in Wickford, she said Ryan was an introverted boy who 'lives his life online'.</span><br /><br /><span style="background-color: #cfe2f3;">She added: 'He has a history of mental problems. </span><br /><br /><span style="background-color: #cfe2f3;">'He left school at 15. </span><br /><br /><span style="background-color: #cfe2f3;">'He has stayed in his room for the last four years in front of his computer. </span><br /><br /><span style="background-color: #cfe2f3;">'He is bright, but does not have any social skills.' </span><br /><br /><span style="background-color: #cfe2f3;">The teenager attended Heath School, in Stanway, Colchester, a school for children with special needs, and is said to have constantly spoken in 'computer jargon'.</span><br /><br /><span style="background-color: #cfe2f3;">Police arrived at the house on Monday night and are said to have spent five hours talking to Ryan.&nbsp;</span></blockquote><br /><a href="http://www.thesun.co.uk/sol/homepage/news/3651298/Essex-geek-Ryan-Cleary-is-Sony-hacker.html?OTC-RSS&amp;ATTR=News">More from The Sun</a>:<b>&nbsp;</b><br /><br /><blockquote><span style="background-color: #cfe2f3;">Police sources said a "mind-boggling amount of information" had been seized from one of the nerdy lad's two computers. </span><br /><br /><span style="background-color: #cfe2f3;"> They added the swoop was just the start of what could be a "long and complex" inquiry - and further arrests were possible. </span><br /><br /><span style="background-color: #cfe2f3;">Stunned Rita, a nurse at Southend Hospital, said her son "lives his life online". </span><br /><br /><span style="background-color: #cfe2f3;"> She told how he has a history of mental illness and suffers from agoraphobia, a fear of open spaces, but is highly intelligent. Rita added that she thought he was playing computer games in his bedroom and cannot believe he was hacking into security agency websites. </span>&nbsp;</blockquote><b> </b></div><div class="thirdPar">All <a href="http://josephevers.blogspot.com/2011/05/ryan-cleary-saad-naveed.html">the websites on the netblocks owned by Saad Naveed</a> were unavailable for a short while Tue Jun 21 2011. </div>http://josephevers.blogspot.com/2011/06/ryan-cleary-arrested.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-4632350232986063471Fri, 10 Jun 2011 22:54:00 +00002011-06-16T05:12:07.045+01:00Turkish Patriots Take Down ED's ForumsForum.encyclopediadramatica.ch, along with other domains associated with the <a href="http://josephevers.blogspot.com/2011/05/ryan-cleary-age-21-admits-to-ddosing.html">21 year old Ryan Cleary</a> were unavailable yesterday because of DDoS attacks originating from Turkish patriots that were targeting Anonnews.org. <a href="http://www.bing.com/search?q=site%3Acrusadegaming.com">Crusadegaming</a> (owned by Saad Naveed), ED's forums and several other sites apparently suffered from collateral damage because they all are routed through a bottleneck at vps.anon.su (209.212.145.6). <br /><br /><a href="http://www.webcitation.org/5zLQP4V0f"> <span style="background-color: #cfe2f3;">Ryan at Crusadegaming: (09 June 2011 - 07:00 PM)</span></a><span style="background-color: #cfe2f3;"> Sorry for today's downtime, massive DDoS</span> <br /><br /><a href="http://www.blogger.com/%20http://www.webcitation.org/5zLPOomZz" style="background-color: #cfe2f3;">AnonNews.org: AnonNews is having capacity issues</a><br /><br /><span style="background-color: #cfe2f3;">AnonNews'in basin bildirisini host etmek disinda OpTurkey'le bir ilgisi bulunmamaktadir. Bu yuzden lutfen AnonNews'e saldirmaktan vazgecin</span><br /><br />As of now (Fri Jun 10 2011), Anonnews remains unavailable while the other sites appear to be back to normal. <a href="http://www.facebook.com/photo.php?pid=9965144&amp;l=44ff807f48&amp;id=226744648031">A statement from Ayyıldız Tim</a> indicates they want an apology directed to the Republic of Turkey before they will cease the disruption. <a href="http://69.65.55.22/">An unadvertised mirror,</a> on the same <a href="http://www.google.co.uk/search?q=%2269.65.55.16/28%22">netblock owned by Saad Naveed</a> as anonnews.org, is still up.<br /><br /><b>Update Sat Jun 11</b>: anonnews.org is back up at <span class="ipaddr"> 66.228.47.225</span><br /><br /><br />In a related story, Cleary is now hosting IRC coordination channels for <a href="http://news.google.com/news/search?aq=f&amp;cf=all&amp;ned=uk&amp;hl=en&amp;q=lulzsec&amp;btnmeta_news_search=Search+News">Lulzsec</a>.&nbsp;<a href="http://www.google.co.uk/search?q=%22irc.lulzco.org%22">(irc.lulzco.org</a> and irc.encyclopediadramatica.ch share six IP numbers (66.228.59.138, 66.228.41.216, 72.14.185.117, 109.74.206.187, 66.228.41.214, 173.255.216.105). )<br /><span style="background-color: #cfe2f3;">[Jun 9 2011 07:56:44] *** Joins: Ryan (~b@LulzCo-63BAB37A.anon.su)</span><br /><span style="background-color: #cfe2f3;">[Jun 9 2011 20:43:06] *** Joins: Ryan (~b@LulzCo-CD8A653B.zone12.bethere.co.uk) </span><br /><span style="background-color: #cfe2f3;"><br /></span><br /><b>Update Wed Jun 15</b>:<br /><br /><a href="http://www.robtex.com/dns/irc.lulzco.org.html">irc.lulzco.org</a> is now using 69.65.55.24&nbsp; and 209.212.149.108. <a href="http://josephevers.blogspot.com/2011/05/ryan-cleary-saad-naveed.html">Arcusvoice.com also points to 69.65.55.24</a>.http://josephevers.blogspot.com/2011/06/turkish-patriots-take-down-eds-forums.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-584084728373488083Fri, 20 May 2011 23:05:00 +00002011-07-10T15:43:54.260+01:00Responses to this blog, part 2A couple days ago, after ryan@encyclopediadramatica.ch sent fan mail to jevers.ceo, several thousand new emails were found in the inbox from [some random number]Attacker.com. When I looked through the headers of those, over 2100 contained the IP address 188.221.245.8. I know this is Ryan Cleary's residential broadband account because he had used it previously to send emails as <a href="mailto:ryan@encyclopediadramatica.ch">Ryan</a> and as <a href="mailto:ni@id.ru">Francis Madsen</a>. Many of those in the inbox were also sent using a php script with the page title&nbsp;"SyRiAn Sh3ll ~ V5.6~ [ B3 Cr34T!V3 Or D!3 TRy!nG ]", that is currently (May 20 2011) installed on the compromised web hosts. <br /><br /><a href="http://www.webcitation.org/5ypekwBoM">The Syrian Shell is described by its original author</a> as<br /><br /><div style="background-color: #cfe2f3;">"a PHP Script that coded to help hackers with there hacking trip . with this script &nbsp;you can so easily hack scripts , inject databases , send spam emails , bypass latest security &nbsp;Updates&nbsp; , collecting information , encrypting and decrypting strings , connecting dealings and &nbsp;more ... in this website . I'll show you the features of this PHP shell , some codes in it and &nbsp;some wonders that you haven't ever seen like it . :)"</div><br />Edit Jul 10 2011: I've removed the listing of 39 websites that hosted the scripts Ryan Cleary used to send thousands of emails to people he admires were installed, because one of the incompetent website owners asked nicely:<br /><br /><br /><br /><blockquote><span style="background-color: #cfe2f3;">I kindly request you to remove from your blog any references to my web site or myself as soon as possible. Should those references do not disappear from your website, I will be obliged to take further action and contact your hosting provider (</span><a href="http://blogger.com/" style="background-color: #cfe2f3;" target="_blank">blogger.com</a><span style="background-color: #cfe2f3;">).</span><br style="background-color: #cfe2f3;" /><br style="background-color: #cfe2f3;" /><span style="background-color: #cfe2f3;"> Hoping we can solve this issue in a prompt manner,</span><br style="background-color: #cfe2f3;" /><br style="background-color: #cfe2f3;" /><span style="background-color: #cfe2f3;"> Kind regards,</span></blockquote>http://josephevers.blogspot.com/2011/05/responses-to-this-blog-part-2.htmlnoreply@blogger.com (Anon)tag:blogger.com,1999:blog-3434846711820144864.post-7534835315692288117Sun, 15 May 2011 22:11:00 +00002011-09-29T03:36:14.187+01:00MeepsheepSince this post was first published, there has been a steady stream of people arriving at this page who were searching for nude photos of children. One would hope that the majority of those searches <a href="http://www.nytimes.com/2011/04/26/world/europe/26iht-abuse26.html">were made by law enforcement officials</a>. <br /><br />Meepsheep was contacted by local police after this post first appeared.http://josephevers.blogspot.com/2011/05/meepsheep-extorts-nude-photos-from.htmlnoreply@blogger.com (Anon)